$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: tsZ2hl2ghvcr9nY3LTuG54Y7FBS2EEmJ7vf5K29MOxk= Subject key identifier: 21:21:64:C7:77:3E:18:FC:DC:29:6F:3D:4C:8D:BA:A0:AF:72:68:9E Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019D28F33FA697D48C35ECB9895DDFFA0E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 18A6 Signing time: Thu 26 Mar 2026 07:02:03 +0000 Manifest this update: Thu 26 Mar 2026 07:02:03 +0000 Manifest next update: Fri 27 Mar 2026 07:02:03 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: iPwYHeKCFe6VfKT0HUX/XzoOsNkYPCQYN0EgiM3hHgw=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 07:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:f3:3f:a6:97:d4:8c:35:ec:b9:89:5d:df:fa:0e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Mar 26 07:02:03 2026 GMT Not After : Mar 27 07:02:03 2026 GMT Subject: CN=212164c7773e18fcdc296f3d4c8dbaa0af72689e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:0f:b6:3b:86:97:92:93:b6:ec:ec:4c:cd: f2:00:62:10:86:2e:b1:4d:4e:47:8d:71:bd:87:4c: 63:e1:d0:af:9d:b5:5a:7c:89:a2:3e:44:39:9b:24: f3:49:3b:2e:db:72:0c:55:07:71:4b:39:5a:ef:38: 39:f1:be:be:70:2a:e7:30:9c:bc:b9:58:e6:4b:39: a0:3f:dd:7e:1e:3a:4e:c6:93:49:ab:53:5b:a9:c6: e7:ab:35:fe:5e:54:aa:03:b5:fa:72:ba:7d:a5:7f: f5:bb:c9:71:ae:d2:4c:0a:c5:a9:bb:1b:5a:7e:96: d2:f7:0e:32:0e:9d:9f:b0:e6:0a:4b:28:bd:fd:5b: df:6d:55:ce:fc:1d:73:6a:f7:45:12:60:8d:fe:9c: b3:ba:31:4a:ff:24:7c:1e:b9:37:75:e7:6b:3c:d0: ec:f7:0f:86:bc:e3:b3:9a:c0:d9:9b:bc:12:7f:59: f6:c1:cf:6f:f2:20:9e:6f:0c:fc:f0:1f:91:68:c7: b7:ab:d8:b7:1e:73:04:37:6d:b2:7f:23:54:74:fb: ea:c5:dc:2a:fb:ec:f5:99:3e:34:71:fa:4e:79:c4: 5d:a3:c4:92:4d:d0:33:d0:2b:d6:33:7b:e3:b8:f3: 52:53:76:f2:5f:26:62:56:81:63:54:51:bb:16:b5: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:21:64:C7:77:3E:18:FC:DC:29:6F:3D:4C:8D:BA:A0:AF:72:68:9E X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:66:30:40:4a:bc:55:0c:b8:03:83:de:34:c0:41:40:2b:72: 15:26:64:6b:bb:4b:d3:b0:ca:4a:f5:40:fa:9f:94:42:a5:3f: 12:1a:b5:77:5e:89:16:1a:59:69:7c:d3:e5:9f:cb:f5:3d:1b: 66:52:fa:51:f2:ed:50:2d:b0:f1:44:0f:b9:84:25:04:3f:dc: db:b1:ee:97:67:26:1f:0b:68:b5:58:9f:9c:0a:96:86:80:eb: c4:c0:9d:5c:21:21:db:2b:36:17:80:7d:2b:1b:75:81:8d:40: 30:80:35:61:57:e2:00:61:7d:11:b0:1f:66:54:e2:31:b2:fc: 98:51:d6:7d:01:c3:50:7a:28:27:4e:14:6c:93:74:d6:d1:44: 41:e3:6b:63:c0:0f:f5:9b:63:7c:d3:f6:68:47:f8:da:79:13: b6:48:7e:48:81:07:68:1e:89:a4:98:cb:f9:08:2b:62:0d:d5: 8b:22:d2:75:ff:98:6c:2b:fa:d0:d2:84:12:7d:ff:f4:9a:63: 03:40:3c:45:1c:29:42:7d:95:00:f1:93:d8:d1:9a:af:54:ee: 39:62:a1:3d:62:c1:00:4c:10:8d:fb:7f:30:f5:7d:7b:17:eb: 89:eb:81:5f:f0:3b:c9:77:e1:85:ba:07:6c:71:6f:fd:80:0d: 37:63:88:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0o8z+ml9SMNey5iV3f+g5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMzI2MDcwMjAzWhcNMjYwMzI3MDcwMjAzWjAzMTEwLwYDVQQD EygyMTIxNjRjNzc3M2UxOGZjZGMyOTZmM2Q0YzhkYmFhMGFmNzI2ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0PtjuGl5KTtuzsTM3yAGIQhi6x TU5HjXG9h0xj4dCvnbVafImiPkQ5myTzSTsu23IMVQdxSzla7zg58b6+cCrnMJy8 uVjmSzmgP91+HjpOxpNJq1NbqcbnqzX+XlSqA7X6crp9pX/1u8lxrtJMCsWpuxta fpbS9w4yDp2fsOYKSyi9/VvfbVXO/B1zavdFEmCN/pyzujFK/yR8Hrk3dedrPNDs 9w+GvOOzmsDZm7wSf1n2wc9v8iCebwz88B+RaMe3q9i3HnMEN22yfyNUdPvqxdwq ++z1mT40cfpOecRdo8SSTdAz0CvWM3vjuPNSU3byXyZiVoFjVFG7FrWVawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEhZMd3Phj83ClvPUyNuqCvcmieMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWYwQEq8 VQy4A4PeNMBBQCtyFSZka7tL07DKSvVA+p+UQqU/Ehq1d16JFhpZaXzT5Z/L9T0b ZlL6UfLtUC2w8UQPuYQlBD/c27Hul2cmHwtotVifnAqWhoDrxMCdXCEh2ys2F4B9 Kxt1gY1AMIA1YVfiAGF9EbAfZlTiMbL8mFHWfQHDUHooJ04UbJN01tFEQeNrY8AP 9ZtjfNP2aEf42nkTtkh+SIEHaB6JpJjL+QgrYg3ViyLSdf+YbCv60NKEEn3/9Jpj A0A8RRwpQn2VAPGT2NGar1TuOWKhPWLBAEwQjft/MPV9exfrieuBX/A7yXfhhboH bHFv/YANN2OIfg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:56:20 2026 by rpki-client